From fbe3ad235b66e7706f2a7f3b1ffdadcf98adeffa Mon Sep 17 00:00:00 2001
From: Pavel Raiskup <praiskup@redhat.com>
Date: Thu, 16 Oct 2025 11:23:33 +0200
Subject: [PATCH] copr-be: fix ownership and permissions of provision files

---
 roles/copr/backend/tasks/resalloc.yml             |  7 ++++++-
 .../tasks/setup_provisioning_environment.yml      | 15 ++++++++++-----
 2 files changed, 16 insertions(+), 6 deletions(-)

diff --git a/roles/copr/backend/tasks/resalloc.yml b/roles/copr/backend/tasks/resalloc.yml
index 9df66c6e73..4a9450d243 100644
--- a/roles/copr/backend/tasks/resalloc.yml
+++ b/roles/copr/backend/tasks/resalloc.yml
@@ -114,7 +114,12 @@
   - provision_config
 
 - name: Resalloc, sync resalloc provisioning files
-  synchronize: src="resalloc_provision/" dest="/var/lib/resallocserver/resalloc_provision/"
+  synchronize:
+    src: "resalloc_provision/"
+    dest: "/var/lib/resallocserver/resalloc_provision/"
+    rsync_opts:
+      - "--chown={{ provision_user }}:{{ provision_user }}"
+      - "--chmod=D775,F664"
   tags:
   - provision_config
 
diff --git a/roles/copr/backend/tasks/setup_provisioning_environment.yml b/roles/copr/backend/tasks/setup_provisioning_environment.yml
index 8ee1ea1d2e..54e5419e99 100644
--- a/roles/copr/backend/tasks/setup_provisioning_environment.yml
+++ b/roles/copr/backend/tasks/setup_provisioning_environment.yml
@@ -10,15 +10,20 @@
 # Warning: this file is included also from copr-hv playbook(s), so keep the
 # source file arguments absolute (not relative to this role)
 - name: Sync copr provisioning files
-  synchronize: src="{{ roles_path }}/copr/backend/files/provision/"
-               dest="{{ provision_directory }}/"
+  synchronize:
+    src: "{{ roles_path }}/copr/backend/files/provision/"
+    dest: "{{ provision_directory }}/"
+    rsync_opts:
+      - "--chown={{ provision_user }}:{{ provision_user }}"
+      - "--chmod=D775,F664"
   tags:
   - provision_config
 
 - name: "Sync copr provisioning files [remove mock config leftovers]"
-  synchronize: src="{{ roles_path }}/copr/backend/files/provision/files/mock/"
-               dest="{{ provision_directory }}/files/mock/"
-               delete=yes
+  synchronize:
+    src: "{{ roles_path }}/copr/backend/files/provision/files/mock/"
+    dest: "{{ provision_directory }}/files/mock/"
+    delete: yes
   tags:
   - provision_config